How to deploy Internet Explorer 11 using SCCM 2012 R2

Deploy Internet Explorer 11 using SCCM 2012 R2 In this post we will see how to deploy internet explorer 11 using SCCM 2012 R2. Internet Explorer is installed when you install the windows operating system and is the default browser for any windows OS. Today most of the companies use Windows 7 as the OS and IE 10 as the browser, with the release of Internet Explorer 11, the companies might be looking to upgrade their browser version from IE10 to IE11. The internet Explorer 11 offers better features than IE10 and is more faster and smoother when compared to IE10. Note that the Internet Explorer 11 is available for a number of systems and languages. Internet Explorer 11 is pre-installed on Windows 8.1 and Windows Server 2012 R2. There are multiple ways on deploying internet explorer 11 and they are listed below.

Windows Server Update Services (WSUS) – Download a single copy of the Internet Explorer 11 updates, caching them to local servers so your users’ computers can receive the updates directly from the WSUS servers, instead of through Windows Update.

Group Policy Software Installation – Deploy and install Internet Explorer 11 on your user’s computers through a combination of Group Policy and Active Directory.

In this post we will see the steps to deploy the IE11 using SCCM 2012 R2 on a Windows 7 computer. We will download the Internet Explorer Administration Kit 11 first. Internet Explorer Administration Kit 11 (IEAK 11) simplifies the creation, deployment, and management of customized Internet Explorer 11 packages. It can be used to configure the out-of-box Internet Explorer 11 experience, and to manage user settings after deployment.

When you install Internet Explorer 11 for Windows 7, the installer program tries to automatically install some prerequisite components. If this part of the installation fails, Internet Explorer stops the installation process.We will download the prerequisites first and then install IEAK 11. To download the IE 11 prerequisites click here.

The prerequisites are available for both 32 bit and 64 bit OS, download the appropriate files depending on whether you are running a 32-bit or 64-bit edition of the operating system. Download the files and extract each update to a folder using 7zip.

The below screenshot shows the updates extracted to each folder.

Install the Internet Explorer Administration Kit 11 on SCCM server or any computer you want. The below listed screenshots shows the installation of IEAK 11, you can skip these if you are familiar with the installation. Click Next.

Choose Internal Distribution via a Corporate Intranet. Click Next.

Complete the installation and click Finish.

Now the IEAK 11 customization wizard pops up, this wizard will help you to customize, deploy and manage IE. Click Next.

Choose the location where you want to store the package. Click Next.

Choose the Target Platform and click Next.

Choose the Target Language and click Next.

Package Type Selection – Click Full Installation Package. Click Next.

You can choose all the features and customize them as per your requirement. Select the IE11 features that you wish to customize and click Next.

Click on Synchronize.

Now we know that IE11 requires certain prerequisites which we have download already. Let’s add them to custom components. Click on Add.

For every KB update go to the individual update folder and select the cabinet file.

Provide the name for that component (provide KB number as its easy to identify the update), choose Install before Internet Explorer (we want the updates to be installed before IE11 is installed) and click Add.

When you have added all the components, it should resemble the below screenshot. Click Next.

User Experience – Choose Completely Silent Installation and No restart. Click Next and complete the wizard.

When you open the destination folder you will see the IE11 package. One of them is an app and other one is windows installer package (.msi).

In the above step we have got the .msi file, we will now create an application and choose the IE11 msi file and click Next.

Click Next. Deploy the app to the device collection.

Now on the client computer we see that the app is available. Click on Install.

Wait for some time while the installation is completed. Check the AppEnforce.log file on client computer for troubleshooting. We see that the IE11 is installed successfully. Though we had suppressed the reboot during the creation of package, I would recommend to reboot the client computer once.

I am Prajwal Desai and I have been working in the IT for over 8 years with a strong focus on Microsoft Server Technologies. For the last five years, as a System Administrator I have been working on Lync, SCCM, Vmware, VDI, Exchange, Windows Servers etc. I’m currently very interested in everything related to Azure, Configuration Manager, Lync, Windows Server and Exchange.

I would like to Clarify that I am using also SCCM 2012 R2 & I Done all your steps But when reached to custom components add from KB2523623 to KB2670838 , on Option install on success as Yes (But your case no) & package created was Successful.

after application deployment wizard on my case I am not to find contents files steps (from KB2523623 to KB2670838) as You marked on RED. it simply take product code & package create application wizard was completed.

the package I done for win7 64 bit system & steps I created on windows 8.1 system. As a Test then I try to deploy on server 2088 R2 SP1 (with IE 8 & IE 10)

installed form the software center & appenforce.log also fine. display as

But I restarted the server I am not able to find IE 11 or updated & Server IE status with IE 10 Kindly let me know that (1) Where I am wrong… (2) for server 2008 R2 same package of win 7 64 bit sp1….? if no then I am not able to find on IE tool kit option for windows server 2008 R2 SP1

only I find win7 & windows 8 (64 Bit & 32 Bit)

Best Regards, Arshad

Arshad Husain

HI Prajwal, Thanks for the Post, Anyhow on some systems I am able to install IE 11 by your Method. Best Regards, Arshad

@Arovbukay – I have tested this on SCCM 2007, can you give a try again ?

Arovbukay

I have retested, Once i’ve created the EXE with IEAK, I then tried uninstalling IE11 from my test machine (along with any pre req patches). I then rebooted the machine and tried installing using IE11-Setup-Full.msi but when I check the IE-main.log file, it shows it is still trying to download 2 of the patches (KB2834140 and KB2670838)

I also tried copying these files it downloads (from c:windowstemp*ietempfolder*) and using these with the IEAK but the same happens, it tried to re-download.

KB2834140 and KB2670838 are the updates required before you install IE11, are you sure you have included them in the IE package ?. I believe the updates should be set to install before IE 11 installs and not after IE11 is installed.

guest

How are you making SCCM pull the update files when they are not in the same source folder as the MSI. Did you just create an IE11 folder and dump all the relevant files in there?

Hi it works when you have IE10 and when you want to upgrade to IE11. I have got many comments from users where they were not able to upgrade from IE8 to IE11. So i am sure my post works well when you upgrade IE10 to 11. Regarding the internet connectivity, I guess its not required as you have updates added to the package already.

Steve Buffenstein

Great post!!! Worked like a champ to upgrade over 500 of our Win 7 machines running IE10 (some on IE 9 as well). Keep up the great work Prajwal!

Hi Prajwal, I did it as you discribe but in my case it didn’t upgrade it. I’m using sccm 2012 and i’m trying to upgrade from ie9 into ie11. When i look into the logs it says it installed with success. Do you know if it works for my case? Thanks in advance. Regards,

Hi Paul, if the updates (prerequisites) are available in the package it should not connect to internet to download the same.

“As a result of this the IE11 install aborts” – Why does the installation stops ?. Have you checked the log files. Yes you can redeploy the package but can you check AppEnforce.log & see what’s happening ?

On the machines where IE old version is seen, try restarting the machine.

bdam

Prajwal, I too am having difficulties getting the prerequisites to install properly when moving from IE 9 and am seeing download errors in the log. The instructions tell us to use the CAB files which, according to the IEAK documentation, https://technet.microsoft.com/en-us/library/dn454905.aspx requires a command but I don’t see one in the instructions or screenshots.

In the ‘Create Application Wizard’ the file list you highlighted in red shows MSU files rather than the CABs. So I’m just a bit confused on that part … where are those coming from if we are using CAB files in the IEAK and not adding them manually in SCCM?

Kamalani DeFreitas

Hi Prajwal,

Thank you for the post. It works great. I am using SCCM 2012 R2 and I am mostly using this to install IE11 during our OSD…I find that it is installing just like it should be. The problem I have run into is when I log onto the computer with a user account that doesn’t have admin privilege they are presented with “The User Profile Service service failde the logon. User profile coannot be loaded.” I have found the only way to allow a non-admin user to log onto the computer is to go into the Properties > Advanced Security Settings >Change Permissions > and then make sure that the box is checked for the “Replace all child object permissions with inheritable permissions from this object” of the Default user.

Have you ran into this issue?

There has got to be a better way to being able to deploy IE 11 over SCCM or some kind of fix. Any input would be helpful.

I used 7zip while extracting the files. Could you try using 7zip once ?

Mark

So could someone tell me if I have this correct…?

I can’t deploy KB2841134 to all the Windows 7 computers in my SCCM 2012 R2 environment because it has expired. A process that would take just several quick moments. But I have to go through this entire process of downloading an admin tool and creating custom packages just to do something as simple as install IE 11? Sounds ridicules.

Yes I have checked the logs they just show the msi command for IE11 running there are no errors. However the updates have not installed. I moved across the msu files when the pacjkage was created. I may try to re-packge it on another evice to see if this is the problem.

Liam Woollery

On a fresh machine I created a script to install updates rebooted it. Ran msi created by ieak then rebooted ie11 installed. It looks like the updates are not importing when the ieak is running nany ideas Thanks

@Codename_Falcon – Nope, the IE11 msi file can be on a different folder. The .msu files are required while creating the IE11 package, once they are packaged the msi file can exist anywhere.

Subin Nk

I am also having the same issue In console showing as IE 11 got installed but still system is runing in IE 9

Jared Wetmore

1st, awesome post ! this is exactly what I need for my deployment of IE11.

Issue is when I add all the pre-req files, they don’t show up on the create application wizard file like yours. I am extracting the files with 7 zip, I choose the .CAB file in the IEAK11 selection. I only have 2 files shown , where you have all the .cab files that are selected in the pre-req installs. any suggestions for me ? thanks again !

Gian Franco Scappini

Dear Prajwal Desai ; for your help to complete all the steps my problem arises when creating the application, because I only row contents appears as ” IE11 – Setup- full.msi and no aggregates prerequisites , and when the deployment teams throw errors when downloading the prerequisites because our comapñia have proxy , and when installing the system account , it is not valid to seek out the prerequisites to the Internet, we have computers with Windows7 64x with IE8 current browser . Thanks

The_Extremist_303_909

Hello, I am using this guide to upgrade from IE10 to IE11. Now, it works fine on 2 of my test machines, but on the other 2 it shows as Installed in Software Centre,checking AppEnforce,AppDiscovery,CAS.log shows no errors.

Install command is: msiexec /i “IE11-Setup-Full.msi” /q When I check the detection rule, the value {BE43D9F2-236F-4322-A482-EFAB8FFE4210} is already in the test machine registry.

So, what is the issue here? Checked Event Viewer also. I can verify that IE10 is installed, and IE11 is not. This will be rolled out to 500 machines approx.Your help is appreciated.

Hi, I have been noticing similar issues raised by most of the users. The IE11 upgrade is working on few machines and failing on rest. I will soon create another post on deploying IE11 using another method.

The_Extremist_303_909

that would be great. hitting my head against the wall now!

Abdullah.M.M

hi,

i tired but not working and not showing in the software center please any-update for the new method for deploying IE10 or IE11

“not showing in the software center” – Have you distributed the app to DP ?. Boundaries and boundary groups in place ?. DP associated with boundary group ?

The_Extremist_303_909

Hi Prajwal. Have you had a chance to look at this? I will be upgrading very shortly be great to sort this out!Thanks

The_Extremist_303_909

Hi Prajwal, Have you managed to look at this. I will be upgrading IE11 very shortly! Thanks

Bill

I know this is a year old post but I am using your methid and it worked but I did not get the user experience screen did I miss something ?

Bill

Hi Prajwal, I have used this process and it works but I have a few clients that IE 11 will not install on but it still shows them as compliant. I have a ticket open with Microsoft and all they keep doing is sending me to various sites very frustrating. Any ideas that might help me I am using SCCM 2012 R1.

What I have noticed on one of my test boxes is that sccm says installed but nothing but when I go into the registry I see entries for IE 11 very odd

daemon616

Where does IE11-Windows6.1-x64-en.us.exe come from? I followed your instructions to a T but I don’t have this file and I noticed it in your screenshot when you created your application.

Correction in the previous comment, IE11-Windows6.1-x64-en.us.exe is IE11 setup file that was downloaded. I had stored the file in the same folder where other files were. When I imported the msi file, it included all the files from the IE11 folder. Did I answer you question ?.

Hi, good post. Was just wondering why there are 32 items being added to the Application. Surely it should just be the MSI itself? I am assuming once it is installed and rebooted IE11 should be installed.

As at the moment, I am not getting that. The Appenforce.log saying it detected the MSI and the exit code was 0

Yaser Hussaini

Hello , Prajwal

The prerequisites for ie11 that you have added do not show, like they do in the in your case.Why is that.?

Mark del Rosario

Hi Prajwal, just wondering, what if the prerequisite is already installed. Basically, the installation of the prerequisite included with the IE package will not push through anymore. Will the installation of IE stop or will still push through? Would the IE package be able to know that the prerequisite is existing and can continue with the installation?